I have an issue where any player can do the command "/easy_npc trading open" to access any trade that exists, as well as all the other commands. I also couldn't find how to prevent players accessing the npc config screen and change their name.

Is it possible to create a way to remove this for basic players like maybe adding it in the config file? I can't find a permissions mod that fixes this for forge 1.20.1.

Thank you!

Thanks for the feedback. Could you please add more details and maybe some examples about your use-case ?

In general most options are restricted to "creative" players or the owner of the NPC.
See:

• BOs-Easy-NPC/src/main/java/de/markusbordihn/easynpc/commands/ConfigureCommand.java

  Line 62 in 592d705

  // Check is player is owner of the EasyNPC.

• BOs-Easy-NPC/src/main/java/de/markusbordihn/easynpc/entity/EasyNPCEntityMenu.java

  Line 400 in 592d705

  private static boolean hasPermissions(ServerPlayer serverPlayer, EasyNPCEntity entity,

If a person spawns the NPC this person is able to configure the NPC with their permission level.
You can disable specific screens over the config file, so that normal users are not able to open any screens, even if they are owning the NPC.

The trading open command is currently unrestricted and will be restricted in the next update.
But the player needs to know the UUID of the NPC to be able to use the command for any unowned NPCs.
None-creative players will only see their own NPCs.

The UUID will be normally not visible for normal players, so I'm not really understanding your exact use-case why this turns out to be any issue in your case.

Thanks for providing some examples to understand your use-case better.